Appl.No. 10/686,107 

Amdt. dated 07/15/2008 

Reply to Office action of 04/15/2008 

Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 

Listing of Claims: 

1. (Currently Amended): 

A system for supporting a messaging service, comprising: 

a first translation gateway that is administered by a customer of the messaging service 
for use between (a) a customer data network that is accessed, by those authorized by a 
customer of the messaging service, the customer, to receive a message via a client 
process, and (b) a hostile data network, 

the first translation g ateway having translation functionality that is applied to a 
plurality of inbound messages, arriving via a hostile network, in a manner that is 
transparent to recipients of said inbound messages who experience the messages via a 
plurality of client processes running in the customer network; and network, 

the first translation gateway having translation functionality that is applied to 
outbound messages, originating with the plurality of client processes in the customer 
network, in a manner that is transparent to users of the plurality of client processes, 
wherein the first translation gateway is designed to verify that accounts of the users are 
current in response to obtaining outbound messages; and 

a second translation gateway for use between 

(a) the hostile data network and network, and 
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(b) a service provider network of a provider of said messaging service, wherein 

said service provider network implements a distributed interface to a telephony 

network from which the inbound messages originate, the second translation gateway 

to forward the inbound messages to the first translation gateway through the hostile 

network in a manner that precludes unauthorized access to the content of the inbound 

messages. 

2. (Cancelled) 

3. (Currently Amended): 

The system of claim 2 claim 1 wherein the second translation gateway is administered by the 
customer. 

4. (Currently Amended): 

The system of claim 3 wherein the intermediate hostile data network is the Internet. 

5. (Original): 

The system of claim 4 wherein the inbound messages originate as facsimile messages. 

6. (Original): 

The system of claim 4 wherein the inbound messages originate as voice messages. 
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7. (Currently Amended): 

The system of claim 2 claim 1 wherein the first translation gateway and the second 
translation gateway are nodes of a virtual private network (VPN) so that the inbound 
messages can be passed between the first and second gateways through a VPN tunnel. 

8. (Currently Amended): 

The system of claim 2 claim 1 wherein the second gateway is to use public keys to encrypt 
the inbound messages before sending them to the first gateway via the hostile network, and 
the first gateway is to use private keys to decrypt the inbound messages prior to forwarding 
them to the plurality of client processes. 

9. (Currently Amended): 

The system of claim 2 claim 1 w herein the first gateway includes further translation 
functionality that is applied to outbound messages, originating with the plurality of client 
processes in the customer network and the outbound messages are addressed to the service 
provider network, in a manner that is transparent to users of tho plurality of client processes, 
and wherein the first translation gateway is designed to then forward the outbound messages 
to the second translation gateway through the hostile data network. 

10. (Currently Amended): 

The system of claim 9 claim 1 wherein the outbound messages are addressed to outbound, 
circuit switched network addresses, and contain one of voice and facsimile data, the service 
provider network implements a distributed interface to a telephony network for transmitting 
the outbound messages to the their outbound, circuit switched network addresses. 
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11. (Currently Amended): 

The system of claim 2 claim 1 wherein Internet Protocol (IP) addresses for nodes in the 
service provider network are assigned by the service provider and not by the customer, and 
IP addresses for nodes in the customer data network are assigned by the customer and not by 
the service provider. 

12. (Original): 

The system of claim 1 wherein the first and second translation gateways are to exchange a set 
of security certificates, wherein all of the plurality of inbound messages, received on behalf 
of a given corporate customer over a plurality of different circuit-switched network addresses, 
respectively, are encrypted by the second translation gateway using the set of certificates. 

13. (Currently Amended): 

A system for supporting a messaging service, comprising: 

a first translation gateway for use between a) a customer data network that is 
administered by a customer of the messaging service and not by a provider of the 
messaging service and b) a hostile data network; and 

a second translation gateway for use between a) the hostile data network and b) a 
service provider network that is administered by the provider and not by the customer, 

wherein the service provider network implements a distributed interface to a 
telephony network into which a message, that originates in the customer data network 
and arrives via the first translation gateway and the hostile network, is transmitted by 
the interface, 
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the first translation g ateway having translation functionality that is applied to a 

plurality of outbound messages originating from a plurality of client processes in the 

customer network, in a manner that is transparent to users of said plurality of client 

processes, the plurality of outbound messages being addressed to the service provider 

the first translation g ateway being designed to then forward the plurality of 
outbound messages to the second translation gateway through the hostile data 
network, network, and 

the first translation gateway being designed to verify that accounts of users are 
current in response to obtaining outbound messages. 

14. (Original): 

The system of claim 13 wherein the first and second gateways are administered by the 
customer and not by the service provider. 

15. (Original): 

The system of claim 13 wherein the first gateway is administered by the customer and not the 
service provider, while the second gateway is administered by the service provider and not 
the customer. 

16. (Original): 

The system of claim 14 wherein the message that is to be transmitted by the interface is a 
facsimile message. 
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17. (Original): 

The system of claim 15 wherein the message that is to be transmitted by the interface a 
facsimile message. 

18. (Original): 

The system of claim 13 wherein the plurality of client processes are associated with a 
plurality of different, customer-authorized users of said processes, respectively, 

and wherein the translation functionality applied to the outbound messages by the 
first gateway includes an encryption key that is used to encrypt every one of the plurality 
of outbound messages which are addressed to the service provider network. 

19. (Original): 

The system of claim 13 wherein the plurality of outbound messages have been addressed to 
circuit-switched network addresses of the telephony network, before they arrive at the first 
gateway. 

20. (Currently Amended): 

A method for providing a secure messaging service, comprising: 

assigning a separate set of circuit switched network addresses to each of a plurality of 
corporate subscribers of the messaging service, some of the sets of circuit switched 
network addresses being in different countries; 

associating the set of circuit switched network addresses for each subscriber with an 
internet domain of said subscriber; 
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receiving one of a) an inbound fax message and b) an inbound voice message that has 

been addressed to one of the set of circuit switched network addresses of a given 

transferring the inbound message to a first translation gateway that is configured to 
service the given subscriber, wherein the inbound message is addressed to the internet 
domain of the given subscriber; and subscriber; 

sending from the first translation gateway the inbound message from the first 
translation gateway to a predefined port of a second translation gateway in a privacy- 
maintaining manner over a hostile data network of which the first and second translation 
gateways are separate nodes, wherein the second translation gateway is administered by 
the given subscriber and is to forward the inbound message to an affiliate of the given 
subscriber over an internal data network of the given subscriber of which the second 
translation gateway is a node, is a node; 

obtaining an outbound message at the first translation gateway, wherein the outbound 
message originated with an affiliate of the given subscriber and was addressed to an 
internet domain of a provider of the messaging service with whom the given subscriber 
has a service contract for secure messaging services, the outbound message having been 
transferred by the second translation gateway to the first translation gateway in a privacy- 
maintaining manner over the hostile data network; 

verifying that an account of the given subscriber is current, in response to obtaining 
the outbound message; and 
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forwarding the outbound message by the first translation gateway to an outbound 

resource of the service provider over an internal data network of the service provider of 

which the first translation gateway and the outbound resource are separate nodes, wherein 

the outbound resource is capable of translating the outbound message into a format that 

can be transmitted to one of a) a facsimile machine and b) a telephone unit, over a 

telephony network. 

21. (Original): 

The method of claim 20 wherein the receipt of the inbound message and the transfer of the 
inbound message occur in an internal data network of a provider of the messaging system. 

22. (Original): 

The method of claim 21 wherein the second translation gateway is to forward the inbound 
message to the affiliate via an email server that is a node of the given subscriber's data 
network. 

23. (Cancelled) 

24. (Currently Amended): 

A method for operating a message delivery service, comprising: 

associating a separate set of data network source address names to each of a plurality 
of different, different group subscribers of the message delivery service, wherein each 
group subscriber has entered into a service contract with a provider of the message 
delivery service; 
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instructing a given one of the plurality of group subscribers to configure a first 

translation gateway administered by the given group subscriber, so that the first gateway 

applies a translation function to any outbound message that originates in an internal data 

network of the given group subscriber and that is addressed to a specified, specified 

internet domain of the service provider, the translation function being designed to ensure 

privacy of an outbound message as it travels through a hostile data network; 

verifying that an account of the given group subscriber is current in response to 
receiving an outbound message that originated in the internal data network of the given 
group subscriber and that traveled through the hostile data network before arriving at a 
second translation gateway; and 

forwarding the received outbound message from the second translation gateway to an 
outbound resource, wherein the second translation gateway and the outbound resource are 
different nodes of an internal data network of the service provider, and wherein the 
outbound resource is to transmit the received outbound message to a circuit-switched 
network address of a recipient. 

25. (Original): 

The method of claim 24 further comprising: 

instructing the given group subscriber to further address any outbound message that 
originates in its internal data network and that is addressed to the specified, internet 
domain of the service provider, to a circuit-switched network address of a recipient. 

26. -35. (Cancelled) 
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